I am in the process of testing  Apache1.3.17 / Reverse Proxy via SSL using
mod_ssl-2.8.0-1.3.17 with openssl-0.9.6-engine.
We use the Rainbow CryptoSwift card as hardware accelerator installed on Sun
Ulta60 sparc.

After installing openssl

./config shared  - -prefix=/usr/local/ap17e/openssl - -
openssldir=/usr/local/ap17e/source/openssl-0.0.6-engine
make
make test
make install

All went OK, but when really testing the hardware board by executing
following command, we get following errors reported :


# openssl speed rsa1024 -engine cswift
engine "cswift" set.
Doing 1024 bit private rsa's for 10s: RSA sign failure
17338:error:26067072:engine routines:CSWIFT_MOD_EXP_CRT:request
failed:hw_cswift
.c:524:CryptoSwift error number is -10004
1 1024 bit private RSA's in 0.29s
Doing 1024 bit public rsa's for 10s: RSA verify failure
17338:error:26066072:engine routines:CSWIFT_MOD_EXP:request
failed:hw_cswift.c:4
13:CryptoSwift error number is -10004
1 1024 bit public RSA's in 0.67s
OpenSSL 0.9.6 [engine] 24 Sep 2000
built on: Wed Feb 21 15:15:24 MET 2001
options:bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long) idea(int)
blowfis
h(ptr) 
compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H
-mcpu=ultr
asparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC
-DMD5_A
SM
                  sign    verify    sign/s verify/s
rsa 1024 bits   0.2900s   0.6700s      3.4      1.5

Looking to the statistics of the card, we see that the test did 1440
requests in total.
When executing without the -engine cswift option works OK.

Integrating the compiled version did not show any error till now.  So we
expect an error in the test suite.

Do you have any idea where this error comes from?
Is this really an error in the test only?  

Thanks for your feedback.

Herman de Taeye

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to